PT-2017-19099 · Osisoft+2 · Osisoft Pi Integrator For Business Analytics+4

Publicado 2017-08-14 · Atualizado 2017-08-23 · CVE-2017-9655

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2 OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1 OSIsoft PI Integrator for SAP HANA versions prior to 2017

Description A Cross-Site Scripting issue allows an attacker to upload a malicious script, potentially redirecting users to a malicious web site.

Recommendations For OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2, update to version 2016 R2 or later. For OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1, update to version 2016 R2 SP1 or later. For OSIsoft PI Integrator for SAP HANA versions prior to 2017, update to version 2017 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-9655

Produtos afetados

Azure

Osisoft Pi Integrator For Business Analytics

Osisoft Pi Integrator For Microsoft Azure

Osisoft Pi Integrator For Sap Hana

Sap Hana

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9655 · Nota de Segurança
• http://securityfocus.com/bid/100212 · Nota
• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9655 · Aviso do Fabricante